Skip to content

Commit 72e1a1e

Browse files
committed
Scaffolding out the pages DEV-177
1 parent 66601fc commit 72e1a1e

File tree

2 files changed

+30
-18
lines changed
  • app/en/home

2 files changed

+30
-18
lines changed
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
---
2+
title: "Brand your auth flow"
3+
description: "How to brand your auth flow"
4+
---
5+
6+
import { Callout } from "nextra/components";
7+
8+
To brand your auth flow, you can use Arcade's default user verifier or build a custom user verifier.
9+
10+
<Callout type="info">
11+
Want to protect users from phishing attacks? Check out our docs on [verifying your users](/home/auth/secure-auth-production).
12+
</Callout>

app/en/home/auth/secure-auth-production/page.mdx

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,26 @@
11
---
2-
title: "Secure Auth in Production"
3-
description: "How to secure and brand your auth flows in production"
2+
title: "Verify your users"
3+
description: "How to verify your users and prevent phishing attacks"
44
---
55

6-
# Secure and Brand the Auth Flow in Production
7-
86
To keep your users safe, Arcade.dev performs a user verification check when a tool is authorized for the first time. This check verifies that the user who is authorizing the tool is the same user who started the authorization flow, which helps prevent phishing attacks.
97

10-
There are two ways to secure your auth flows with Arcade.dev:
8+
<Callout type="info">
9+
Interested in branding your auth flow? Check out our docs on [branding your auth flow](/home/auth-providers/branding-auth).
10+
</Callout>
1111

12-
- Use the **Arcade user verifier** for development (enabled by default)
13-
- Implement a **custom user verifier** for production
12+
## Prevent phishing attacks by verifying your users
1413

15-
This setting is configured in the [Auth > Settings section](https://api.arcade.dev/dashboard/auth/settings) of the Arcade Dashboard.
14+
There are two ways to verify your users with Arcade.dev:
1615

17-
## Use the Arcade user verifier
16+
- Use the **Arcade user verifier** for development. This is enabled by default when you create a new Arcade.dev account and works well with internal apps, solo projects, and proof-of-concept apps.
17+
- Implement a **custom user verifier** for production. This is required for multi-user apps and agents, as it doesn't require your users to sign in to Arcade.dev and lets you fully control the design of the auth flow in your own application.
1818

19-
If you're building a proof-of-concept app or a solo project, use the Arcade user verifier. This option requires no custom development and is on by default when you create a new Arcade.dev account.
19+
You can configure this in the [Auth > Settings section](https://api.arcade.dev/dashboard/auth/settings) of the Arcade Dashboard.
2020

21-
This setting is configured in the [Auth > Settings section](https://api.arcade.dev/dashboard/auth/settings) of the Arcade Dashboard:
21+
## How to use Arcade's default user verifier
22+
23+
This option requires no custom development and is enabled by default when you create a new Arcade.dev account.
2224

2325
<img
2426
src="/images/docs/auth/dashboard-arcade-verifier.png"
@@ -27,9 +29,7 @@ This setting is configured in the [Auth > Settings section](https://api.arcade.d
2729
width="600"
2830
/>
2931

30-
When you authorize a tool, you'll be prompted to sign in to your Arcade.dev account. If you are already signed in (to the Arcade Dashboard, for example), this verification will succeed silently.
31-
32-
The Arcade.dev user verifier helps keep your auth flows secure while you are building and testing your agent or app. When you're ready to share your work with others, implement a [custom user verifier](#build-a-custom-user-verifier) so your users don't need to sign in to Arcade.dev.
32+
When a user authorizes a tool, they'll be prompted to sign in to their own Arcade.dev account. If they are already signed in (to the Arcade Dashboard, for example), this verification will succeed silently.
3333

3434
<Callout type="info">
3535
Arcade's default OAuth apps can *only* be used with the Arcade user verifier.
@@ -39,13 +39,13 @@ The Arcade.dev user verifier helps keep your auth flows secure while you are bui
3939
Dashboard](/home/auth-providers/google#access-the-arcade-dashboard).
4040
</Callout>
4141

42-
## Build a custom user verifier
42+
## How to build a custom user verifier
4343

44-
In a production application or agent, end-users are verified by your code, not Arcade.dev. This allows you to fully control the user experience of the auth flow. To enable this, build a custom verifier route and add the URL to the Arcade Dashboard.
44+
With a custom user verifier, users are verified by your verifier, not Arcade's.
4545

46-
When your users authorize a tool, Arcade.dev will redirect the user's browser to your verifier route with some information in the query string. Your custom verifier route must send a response back to Arcade.dev to confirm the user's ID.
46+
When a user authorizes a tool, Arcade.dev will redirect the user's browser to your verifier route with some information in the query string. Your custom verifier route must send a response back to Arcade.dev to confirm the user's ID.
4747

48-
If you need help, join the [Implementing a custom user verifier](https://github.com/ArcadeAI/arcade-ai/discussions/486) GitHub discussion and we'll be happy to assist.
48+
This allows you to fully control the user experience of the auth flow in your own application. To enable this, you will need to build a custom verifier route and add the URL to the [Auth > Settings section](https://api.arcade.dev/dashboard/auth/settings) of the Arcade Dashboard.
4949

5050
import { Steps, Tabs, Callout } from "nextra/components";
5151

0 commit comments

Comments
 (0)